Project Cybersecurity Officer

Hitachi Rail

Singapore

On-site

SGD 120,000 - 180,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Hitachi Rail Singapore is seeking a Project Cybersecurity Officer to lead operational security for rail signalling projects. You will manage security incidents, conduct vulnerability management, and ensure data confidentiality across global projects.

The role requires a Bachelor’s degree in IT/CS, 5+ years in cybersecurity, and certifications such as ISO/IEC 62443, ISO 27001, NIST or CIS Benchmarks. You will collaborate with multiple teams to enforce cyber hygiene and compliance.

Qualifications

Bachelor’s Degree qualification in IT/ Computer Science / Computing or Equivalent.
Certification on ISO/IEC 62443, ISO 27001, NIST, CIS Benchmarks.

Responsibilities

Manage Cyber Security (operational security) activities for the projects, including incident management security monitoring, vulnerability management and data confidentiality & integrity.
Collaborate with Deployment Managers and Configuration Managers to provide operational security reports and metrics to the AISO and Project Managers.
Act as the primary incident handler, being the main point of contact for all critical and high severity security incidents and involving the AISO and relevant IS/IT Managers when required.
Supervise the implementation and ongoing operation of local security controls, solutions, and requirements, ensuring they are maintained effectively.
Engage early in projects to identify risks and define necessary security requirements.
Ensure compliance to General Specifications Appendix H of LTA tenders for their corresponding projects.
Provide the Cybersecurity input to the Country Incident Management Plan, implement them and monitor them.
Manage the cybersecurity risks associated with suppliers, in collaboration with the Procurement and the Compliance departments.
Perform a gap analysis between the LTA contracts, the ad-hoc demands and the requirements from PTOs.
Establish processes and checklist for the engineering and deployment teams that interface with customer assets to ensure cyber hygiene is followed.
Perform periodic audit of the engineering and deployment teams on application of cyber hygiene.
The person have a right of veto over any decision that may introduce security risks to the projects (e.g. projects or changes that could expose customers and internal systems to vulnerabilities, or the deployment of insecure software). This includes oversight of changes. The P-CSO identifies risks and potential business impacts, reports findings to the AISO, recommends necessary countermeasures, and provide lessons learned.

Skills

Cybersecurity

Incident Response

Security Architecture

Threat Management

Vulnerability Management

Data Classification

Loss Prevention

Privileged Access

Vendor Management

Regulatory Compliance

Endpoint Security

Encryption

SOC

SIEM

Penetration Testing

Education

Bachelor’s Degree in IT/CS

Tools

ISO/IEC 62443

ISO 27001

NIST

CIS Benchmarks

Job description

About Us

A career at Hitachi Rail will help create a legacy. With operations in every corner of the world, our work goes to the cutting-edge of digital transformation and technology. From the multi-cultural strength of our global organisation to the sustainable and innovative ways we work to bring people together, there’s something for everyone to get stuck into. And that’s where you come in.

About Us

Job Description

As Hitachi Rail Singapore, we are advancing rail signalling and safety solutions to ensure safe and efficient railway operations worldwide.

Our technologies help to bring billions of people reliably to their destinations by rail every year – making sustainable mobility a reality.

Project Cybersecurity Officer (Ref.No. R1012647)

at our location in Singapore

You will enjoy having these responsibilities

Manage Cyber Security (operational security) activities for the projects, including incident management security monitoring, vulnerability management and data confidentiality & integrity.

Collaborate with Deployment Managers and Configuration Managers to provide operational security reports and metrics to the AISO and Project Managers.

Act as the primary incident handler, being the main point of contact for all critical and high severity security incidents and involving the AISO and relevant IS/IT Managers when required.

Supervise the implementation and ongoing operation of local security controls, solutions, and requirements, ensuring they are maintained effectively.

Engage early in projects to identify risks and define necessary security requirements.

Ensure compliance to General Specifications Appendix H of LTA tenders for their corresponding projects.

Provide the Cybersecurity input to the Country Incident Management Plan, implement them and monitor them.

Manage the cybersecurity risks associated with suppliers, in collaboration with the Procurement and the Compliance departments.

Perform a gap analysis between the LTA contracts, the ad-hoc demands and the requirements from PTOs.

Establish processes and checklist for the engineering and deployment teams that interface with customer assets to ensure cyber hygiene is followed.

Perform periodic audit of the engineering and deployment teams on application of cyber hygiene.

The person have a right of veto over any decision that may introduce security risks to the projects (e.g. projects or changes that could expose customers and internal systems to vulnerabilities, or the deployment of insecure software). This includes oversight of changes. The P-CSO identifies risks and potential business impacts, reports findings to the AISO, recommends necessary countermeasures, and provide lessons learned.

You have

Qualifications

Bachelor’s Degree qualification in IT/ Computer Science / Computing or Equivalent

Certification on any of the following standards: ISO/IEC 62443, ISO 27001, NIST, CIS Benchmarks

Competencies

Minimum of 5 years’ experience in the cybersecurity domain

Security Monitoring and Incident Response

Security Architecture design

Threat management

Vulnerability, configuration, policy and compliance cyber management tools

Experience in Data Classification and Loss Prevention

Privileged Access Management

Ideally experience in managing security vendors and partners, (evaluating and selecting vendors, negotiating contracts, and overseeing vendor performance)